Command Injection Vulnerability in Netgear EX8000 Router
CVE-2025-45493
6.5MEDIUM
What is CVE-2025-45493?
The Netgear EX8000 router has a command injection vulnerability that can be exploited through the 'iface' parameter in the 'action_bandwidth' function, allowing an attacker to execute arbitrary commands on the device. This vulnerability presents a significant risk, enabling unauthorized control and system manipulation. Proper patching and security measures should be taken to safeguard affected devices.
References
CVSS V3.1
Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved